Hi, the question is not directly about Joomla 3.7.2. However, hope you can help. Currently, we have Joomla 3.7.0. And need to upgrade. It takes every time certain effort to upgrade the version. And if we don't do it - we have constant hack attacks. Is it possible to get protection against such attacks without keep constantly upgrading.

@james_mc: "constantly updating" is somewhat relative. My guess, however, is that J! 3.7.2 is fairly stable and unlikely to change much over the next few weeks (although I could be mistaken)

J! 3.7.0 contained a security problem that, if exploited, could cause serious consequences for the uninformed/naive/wishful-thinkers. Details of that security exploit have been publicised and, therefore, it's only a matter of time before we see "Help! My J! 3.7.0 site has been hacked". And what would those people expect will be our response?

Yes, it's possible to "patch" these security problems (there are a couple of files that need to be amended) but I'm not going to throw inflammable liquid on the fire and explain, publicly, how to do that. The most straightforward approach is to update your J! 3.7.0 site to J! 3.7.2 (spend the 10 minutes it takes) and do the job properly. Then again, it's your site and you can do what you want.

https://www.kuneze.com/blogFormer member of Kunena project teamIf you think I’m wrong then say “I think you're wrong.” If you say “You’re wrong!”, how do you know?

I can't use 3.7.1 because this corrupts the Installation of the JCE Editor with blank Pop Up's!I can't install 3.7.2 because then it corrupts my FAQ Area build up with slider accordions : sliders-v7.1.1!

I like it seen security issues fixed!But by now it seems like shoot the bastard approaching he coul'd possibly be a burgler! ......

Now i tried to find just one simple inline article sollution, because with every update there are less possibilities so I think I may send my customers some hand outs by Pony Express..... At least ther I could be shure that they are able to see some FAQ!

As part of our new project, we are still comparing to choose between the major CMS providers and as per last cmsmatrix.com comparison we found out that below features still not yet available, kindly help us identify whether if the following features became available now as per the latest release so we can notify the cmsmatrix team to update their record.Under system requirements features we have Root and Shell access - Under security features we have Audit trail, Kerberos Authentication, NIS Authentication, NTLM Authentication, problem notification, sandbox, and SMB Authentication - Under Support features we have Certification program - Under Ease of use features we have drag and drop content, site setup wizard, style wizard , undo and Zip archives - Under Performance features we have database replication and static content export - Under Management features we have clipboard, content staging, package deployment,workflow engine - Under Interoperability features we have WAI compliant and WebDAV support and under the built-in applications we have the following features HTTP proxy and in/out Board Matrix and My page Dashboard.

Please help us identify whether the mentioned features are available now with the latest release.

In the user>permissions>offline access has disappeared. I only noticed this when starting a new site from scratch. The ones updated from previous Joomla versions have kept the settings I previously set for users that I want to grant offline access. Why has this easy and useful option disappeared? How do you set offline access in Joomla 3.7.2?

Any help would be appreciated. Better still can this be sorted out in 3.7.3 asap?

I figured it out .... I thought that was the way to configuring it. Turns out it isn't - you still have to go to Global Configuration, permissions, etc. I guess I was thinking the new feature was even more amazing than it is!